The SRU process is dedicated work that is specific to non-security
updates to a package in a released Ubuntu version: no such thing has
been done for libssh2 in 22.04. It has to be done for every change
anyway as the goal is to avoid behavior differences from the
corresponding changes.

But I was wrong on the relevant process: backports is the appropriate
one because this isn't a new micro version and there are many changes
between 2.10.0 and 2.11.0. Please read
https://help.ubuntu.com/community/UbuntuBackports and make sure that it
fits your own processes.

Another alternative that is faster is a PPA. I would classify it as
pretty close to the backports in practice but without the paperwork.

PS: Backports and PPAs are not covered by security update policies but
libssh2 in Ubuntu 22.04 is in "universe" and therefore community-
maintained with the corresponding update policies (only Ubuntu Pro would
offer a different policy). (in 24.04, it has been promoted to "main"
however, but that's not retro-active)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2079834

Title:
  libssh2-1 lacks support for rsa-sha2-{512,256}

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libssh2/+bug/2079834/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to